CVE-2014-8424

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Arris VAP2500 - Authentication Bypass2014-11-25 · webapps · hardware

Impact

ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.zerodayinitiative.com/advisories/ZDI-14-388/
• http://www.zerodayinitiative.com/advisories/ZDI-14-388/